Fluid Attacks Database

Description

Oracle CPU describes the issue as following: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster and unauthorized read access to a subset of MySQL Server, MySQL Cluster accessible data.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
rpm rhel8	mysql	<0:8.4.11-1.module+el8.10.0+24662+2d989aa9	0:8.4.11-1.module+el8.10.0+24662+2d989aa9
rpm rhel9	mysql	<0:8.4.11-1.module+el9.8.0+24663+27effc5a	0:8.4.11-1.module+el9.8.0+24663+27effc5a
rpm rhel10	mysql8.4	<0:8.4.11-1.el10_2	0:8.4.11-1.el10_2

Aliases

1. CVE-2026-603152. NVD-2026-603153. OSV-2026-60315

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.